Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File:                     MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier:          4iELf7nL5fxokfISAm/jmFvtLV7pnKsyLYzWyLoJwnQ=
Subject key identifier:   AB:F0:71:48:94:33:05:25:9B:6C:FB:AB:D3:C2:0D:64:C0:14:87:99
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       0548
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number:          0540
Signing time:             Thu 16 Apr 2026 23:24:03 +0000
Manifest this update:     Thu 16 Apr 2026 23:24:02 +0000
Manifest next update:     Thu 23 Apr 2026 23:24:02 +0000
Files and hashes:         1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: mRh/soy+/KUxJVJZqZQcfaaN20rdaR4JCNifqXMScno=)
                          2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: 02njxqH2L4wOnvQejnJTMQG2JPDgzeMC5zu+OD6du44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Apr 16 23:24:02 2026 GMT
            Not After : Apr 23 23:24:02 2026 GMT
        Subject: CN=69e16f93-2b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:93:b2:63:65:ca:d1:6f:37:19:54:e5:be:
                    73:73:55:dc:c3:be:33:1d:a1:ca:67:2b:f8:4f:cc:
                    71:97:c4:94:c6:e5:d2:0b:da:38:be:ed:b3:c6:de:
                    1c:a7:0f:3b:77:45:de:75:f5:11:03:56:50:65:31:
                    dd:c7:55:1e:b9:19:19:d6:8e:f4:c7:af:82:db:48:
                    5d:a5:61:c6:9e:a7:8a:f7:fb:b7:95:fd:b0:1e:f9:
                    3b:14:e3:fa:b5:dd:1a:3c:09:ed:42:92:fa:04:8d:
                    b8:d4:64:09:81:76:35:bf:65:17:6c:8b:75:c6:2a:
                    8e:90:da:4c:33:b3:ef:75:ef:c3:5f:10:01:2c:aa:
                    39:7c:b3:10:76:a3:f7:67:a5:56:8a:78:e0:ec:34:
                    e2:e0:ad:45:cc:1d:ef:b0:e2:1d:f4:67:78:f8:5b:
                    04:de:6f:7b:d7:b1:47:5d:ba:2c:b4:ed:c0:76:aa:
                    e5:db:a4:d1:ea:1b:39:b7:e7:01:56:c0:0f:21:07:
                    35:9f:89:18:55:dc:d1:7c:00:e1:44:40:9b:ef:2c:
                    f1:f0:49:fd:c9:24:a0:ce:d7:8b:7f:1c:54:b7:9a:
                    e1:7e:6f:dd:c4:88:c3:60:9f:1f:a2:0a:dd:cf:e3:
                    96:ed:b7:02:54:92:ef:09:29:78:57:ec:b7:f0:a3:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:71:48:94:33:05:25:9B:6C:FB:AB:D3:C2:0D:64:C0:14:87:99
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:c9:4a:07:37:59:20:63:8d:bb:5e:51:93:35:2d:5e:bd:
         c9:da:02:74:4f:db:45:17:35:36:4c:fb:cf:51:2f:39:89:43:
         5c:bc:e0:45:4f:63:01:bb:38:be:c7:5c:53:c4:73:50:0b:d0:
         6c:ca:cd:d5:4c:3a:4f:76:60:4e:a9:70:1e:5a:5c:7a:79:72:
         d8:7f:55:af:44:5c:99:c6:21:55:68:b1:3c:05:95:05:d8:21:
         46:5f:70:a7:31:4b:09:0d:27:17:16:3e:44:e0:79:73:f0:e2:
         8a:33:7a:f1:b1:df:82:a0:74:bf:ee:10:63:01:26:75:fe:cc:
         63:66:56:94:7f:ee:4b:a3:9f:12:b0:1e:28:13:50:8d:03:e5:
         8c:fe:3c:b8:bd:8e:0c:de:f1:e8:7e:35:91:c8:5b:f8:f8:65:
         ab:49:85:eb:cc:82:10:84:d3:87:e1:63:48:02:c8:7c:c1:28:
         09:e9:58:d7:49:5f:01:b6:41:58:29:3b:4d:d2:ad:28:1e:91:
         c2:59:1f:75:8e:6f:c3:46:30:d6:09:42:d0:a6:fd:4e:f4:45:
         16:3b:af:c0:2a:05:63:0d:eb:3e:92:26:13:f5:87:a4:3b:bf:
         ff:a2:e8:c5:2c:f7:f6:23:58:49:5d:7d:7d:20:38:b3:46:f9:
         7c:df:cf:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1
QjgzQ0MzNEQwHhcNMjYwNDE2MjMyNDAyWhcNMjYwNDIzMjMyNDAyWjAYMRYwFAYD
VQQDEw02OWUxNmY5My0yYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6qTsmNlytFvNxlU5b5zc1Xcw74zHaHKZyv4T8xxl8SUxuXSC9o4vu2zxt4c
pw87d0XedfURA1ZQZTHdx1UeuRkZ1o70x6+C20hdpWHGnqeK9/u3lf2wHvk7FOP6
td0aPAntQpL6BI241GQJgXY1v2UXbIt1xiqOkNpMM7Pvde/DXxABLKo5fLMQdqP3
Z6VWinjg7DTi4K1FzB3vsOId9Gd4+FsE3m9717FHXbostO3Adqrl26TR6hs5t+cB
VsAPIQc1n4kYVdzRfADhRECb7yzx8En9ySSgzteLfxxUt5rhfm/dxIjDYJ8fogrd
z+OW7bcCVJLvCSl4V+y38KPm+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKvwcUiU
MwUlm2z7q9PCDWTAFIeZMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4
QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr
T25MV3hfay1rRXRiZzh3MDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN7zJSgc3WSBjjbteUZM1LV69ydoCdE/bRRc1Nkz7z1EvOYlDXLzgRU9jAbs4
vsdcU8RzUAvQbMrN1Uw6T3ZgTqlwHlpcenly2H9Vr0RcmcYhVWixPAWVBdghRl9w
pzFLCQ0nFxY+ROB5c/DiijN68bHfgqB0v+4QYwEmdf7MY2ZWlH/uS6OfErAeKBNQ
jQPljP48uL2ODN7x6H41kchb+Phlq0mF68yCEITTh+FjSALIfMEoCelY10lfAbZB
WCk7TdKtKB6RwlkfdY5vw0Yw1glC0Kb9TvRFFjuvwCoFYw3rPpImE/WHpDu//6Lo
xSz39iNYSV19fSA4s0b5fN/P5A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:49 2026 by rpki-client